Data Protection
Introduction
Luton Sixth Form College is committed to protecting the personal data it holds and to processing that information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data (Use and Access) Act 2025 (DUAA).
We process personal data in line with the core data protection principles, ensuring that it is handled lawfully, fairly and transparently, and that the rights of individuals are respected and upheld at all times.
The College's ICO Registration number is Z5209633 ICO’s website for registration details
How We Use Your Information
For Students:
Most of the data we collect and process is used to provide education and welfare services, which form a necessary part of the agreement you make with us when you enrol. This includes the provision of on-site and remote (offsite) learning and support.
For Staff:
Most of the data we collect and process is used to provide employment and welfare services, which are a necessary part of the agreement you make with us when you sign your contract of employment.
Our Legal Basis for Processing Your Data
Data protection law requires the College to identify a lawful basis for processing personal data. Luton Sixth Form College only processes personal data where it is necessary and lawful to do so. In most cases, processing is required to provide education, employment services, and to meet our statutory responsibilities.
The lawful bases we rely on include:
Contract: Core data is processed to provide the services agreed when you enrol or sign your employment contract.
Legal Obligation: Some personal data must be processed to comply with legal and regulatory duties. This includes sharing required information with government departments and funding bodies, such as the Department for Education, examining bodies, and regulatory authorities.
Vital Interests: In limited circumstances, the college may process personal data to protect your vital interests or those of another person. This may include medical, safeguarding or emergency information where there is a serious risk to health or safety.
Consent: Where personal data is not required for contractual, legal, or vital interests purposes, the College may rely on consent. Where this applies, consent will be clear and specific, and you have the right to withdraw it at any time.
We only collect and process data that is relevant, necessary and proportionate, and we handle all information securely in accordance with data protection legislation and College policies.
Your Rights and How to Contact Us
If you have any queries regarding your data, or wish to exercise your rights, including making a Freedom of Information request or a Subject Access Request, you may do so in writing by email or post.
We also welcome feedback and suggestions on how we can improve our services.
Any questions, comments or complaints should be directed to:
dataprotectionLSF@lutonsfc.ac.uk
Louise Barden, Data Protection Officer, Luton Sixth Form College, Bradgers Hill Road, Luton, LU2 7EW